Newsletter Archives
-
Initial impressions of Patch Tuesday, March 2020
We have 113 new patches in the Microsoft Update Catalog.
There’s a new Servicing Stack Update for Win10 version 1903 and 1909, KB 4541338. There’s also a new one for Win10 1809 and 1803, and for Win8.1.
Dustin Childs’s report is up on the ZDI site:
- 115 separately identified security holes (CVEs)
- None of them are “Publicly known” or “Exploited.”
CVE-2020-0852 is his top pick for a notable security hole. It’s a bug in Word that can be triggered if you preview a Word document in Outlook. The offered patches are for Office 2019 Click-to-Run, Mac Office 2016, Office Online Server, and Sharepoint Server 2019. Microsoft categorizes it as “Exploitation less likely.”
Martin Brinkmann has his usual detailed, thorough analysis of the patches on ghacks.net.
Microsoft hasn’t acknowledged the bugs in the “optional, non-security, C/D Week” patch for Win10 1903 and 1909, released late last month. No idea if this latest drop fixes any of the multitude of problems with KB 4535996. There’s also no mention I can find of the disappearing icon/temporary profile bug that’s been with us for the past month. But there is a humongous list of fixes to 1903 and 1909.
Notably, the change lists for both Win10 1903 and 1909 are the same.
No indication that Win10 version 2004 will ship today. I was half-way expecting it.
UPDATE: Two hours later and I’m not seeing any major cries of pain. Stay tuned.